Add ECS Exec permissions

PRX · Jan 16, 2025 · 8cc0c2a · 8cc0c2a
1 parent 740b060
commit 8cc0c2a
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/spire/templates/apps/id.yml b/spire/templates/apps/id.yml
@@ -201,6 +201,18 @@ Resources:
               Service: ecs-tasks.amazonaws.com
         Version: "2012-10-17"
       Policies:
+        - PolicyDocument:
+            Statement:
+              - Action:
+                  - ssmmessages:CreateControlChannel
+                  - ssmmessages:CreateDataChannel
+                  - ssmmessages:OpenControlChannel
+                  - ssmmessages:OpenDataChannel
+                Effect: Allow
+                Resource: "*"
+                Sid: AllowPorterJobExecution
+            Version: "2012-10-17"
+          PolicyName: EcsExec
         - PolicyDocument:
             Statement:
               - Action: sns:Publish